Bird-users

Download

bird-users@network.cz

March 2018

41 participants
42 discussions

Access Denied when Using birdc
by Golden Shadow 05 Mar '18

05 Mar '18

Hello BIRD users, I am trying to automate some configuration of BIRD by changing its configuration file (/etc/bird.conf). However, when I try to apply the changes using: # birdc -r "configure" I get: BIRD 1.6.3 ready.Access restrictedAccess denied I am using BIRD 1.6.3 as you see above. Thanks in advance!Regards,Firas

2 1

FW: Advertise loopback IP into BGP - BIRD 2.0.1
by LAKSHMANAN, THIRUVAZHIYA 04 Mar '18

04 Mar '18

Can someone help me on this please ? Regards, Thiruvazhiyan Lakshmanan NVP – Testing and Certification team Room - A3 1C-24 Middletown, NJ 07748 USA Email: tl488q(a)att.com<mailto:tl488q@att.com> Office: +1 732 420 8076 Mobile: +1 732 331 3485 From: LAKSHMANAN, THIRUVAZHIYA Sent: March 01, 2018 4:12 PM To: 'Robert Blayzor' Subject: RE: Advertise loopback IP into BGP - BIRD 2.0.1 Hi Robert, Thanks for your response. My goal is to just export lo:10 interface IP (10.10.200.3/32) through eBGP and import all the routes on the BGP. With the following configuration, I am able to import all the routes, but export of lo:10 interface route is not happening. Below is my bird.conf , what is that I am missing? router id 198.51.100.10; filter http_loopback { if net = 10.10.200.3/32 then accept; } #protocol kernel { # ipv4 { # import all; # export all; # Default is export none # }; # scan time 20; # persist; # Don't remove routes on BIRD shutdown #} protocol direct { interface "lo:10"; ipv4 { export filter http_loopback; }; } protocol device { scan time 10; # Scan interfaces every 10 seconds } protocol bgp { local 10.10.100.2 as 65110; neighbor 10.10.100.1 as 65001; ipv4 { export filter http_loopback; import all; }; } I have a doubt, the "show route" output is also not showing the lo:10 ip in the table. Why is it not in the table. And "show protocol all" output under BGP shows below, it has 6 routes received and 6 rejected for Export updates. Why is it rejecting. Channel ipv4 State: UP Table: master4 Preference: 100 Input filter: ACCEPT Output filter: http_loopback Routes: 6 imported, 0 exported Route change stats: received rejected filtered ignored accepted Import updates: 6 0 0 0 6 Import withdraws: 0 0 --- 0 0 Export updates: 6 6 0 --- 0 Regards, Thiruvazhiyan Lakshmanan NVP – Testing and Certification team Room - A3 1C-24 Middletown, NJ 07748 USA Email: tl488q(a)att.com<mailto:tl488q@att.com> Office: +1 732 420 8076 Mobile: +1 732 331 3485 -----Original Message----- From: Robert Blayzor [mailto:rblayzor@inoc.net] Sent: February 26, 2018 6:01 PM To: LAKSHMANAN, THIRUVAZHIYA Subject: Re: Advertise loopback IP into BGP - BIRD 2.0.1 Is your goal to ONLY export the loopback? If so, disable the kernel protocol and either just do direct or even statics… I never use kernel as I’m not using my servers as a router, but rather as just a route server, so I never change or export the actual servers routing table. You have to add an export to your direct… try: protocol direct { interface "lo:10”; ipv4 { export filter http_loopback; }; } protocol bgp { ... ipv4 { import all; }; } — Robert Blayzor E-Mail/XMPP: rblayzor.AT.inoc.net PGP: https://urldefense.proofpoint.com/v2/url?u=https-3A__inoc.net_-7Erblayzor_&… > On Feb 26, 2018, at 5:46 PM, LAKSHMANAN, THIRUVAZHIYA <tl488q(a)att.com<mailto:tl488q@att.com>> wrote: > > protocol direct { > interface "lo:10"; > } > filter http_loopback { > if net = 10.10.200.3/32 then accept; > } > protocol kernel { > ipv4 { > import all; > export all; # Default is export none > }; > scan time 20; > persist; # Don't remove routes on BIRD shutdown > } > protocol device { > scan time 10; # Scan interfaces every 10 seconds > } > protocol bgp { > local 10.10.100.2 as 65110; > neighbor 10.10.100.1 as 65001; > ipv4 { > export filter http_loopback; > import all; > }; > > }

2 1